This may be a small bug. In the login watchers there is a function:
Here are the settings that show up:
X changes made by the same user in Y hours
This is weird. What changes to non-existent accounts? Shouldn't this have settings for:
X failed login attempts from Y IP address in the past Z hours
Are the wrong settings showing up or am I missing something
So far its clear.Failed Mass Non-Existent Logins
This watcher detects if someone is attempting to log in with a large number of different non-existent user names.
Here are the settings that show up:
X changes made by the same user in Y hours
This is weird. What changes to non-existent accounts? Shouldn't this have settings for:
X failed login attempts from Y IP address in the past Z hours
Are the wrong settings showing up or am I missing something